{
  "SBOM_ARTIFACT_MISMATCH": {
    "path": "sbom.target.version",
    "value": "3.1.0",
    "expected_decision": "DENY_SBOM_ARTIFACT_MISMATCH"
  },
  "PROVENANCE_SUBJECT_MISMATCH": {
    "path": "provenance.subject.0.digest.sha256",
    "value": "eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee",
    "expected_decision": "DENY_PROVENANCE_SUBJECT_MISMATCH"
  },
  "UNAPPROVED_BUILDER": {
    "path": "provenance.predicate.runDetails.builder.id",
    "value": "https://builder.example/untrusted/v0",
    "expected_decision": "DENY_UNAPPROVED_BUILDER"
  }
}
